This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json) Hash identifier: eQqmEpW1/8mGQOZVL6GGhyW/mkGk9O77IczLWuZxHLM= Subject key identifier: 70:A6:72:81:EA:2F:6B:AA:CA:CF:44:FB:BF:8F:BE:FE:32:23:7B:DF Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5 Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5 Certificate serial: 019B36B32C957F963069B320A90E21B13065 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft Manifest number: 17B2 Signing time: Fri 19 Dec 2025 13:01:10 +0000 Manifest this update: Fri 19 Dec 2025 13:01:10 +0000 Manifest next update: Sat 20 Dec 2025 13:01:10 +0000 Files and hashes: 1: 5GwPbo7__4TJOwvRCe73j2O6xPU.roa (hash: 24uofXG+x5P8v+OHdd1JuXbfxl5UDoLkFS3hRtXAGVU=) 2: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: k2T/TXzcjMQ7fuI36Uyy0prKJ9m7fV8B4pA+JVDnvIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:2c:95:7f:96:30:69:b3:20:a9:0e:21:b1:30:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5 Validity Not Before: Dec 19 13:01:10 2025 GMT Not After : Dec 20 13:01:10 2025 GMT Subject: CN=70a67281ea2f6baacacf44fbbf8fbefe32237bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ab:0d:83:d1:be:25:f9:d1:69:c5:96:00:56: f8:88:a3:09:56:6e:9b:15:f3:ac:db:95:26:ec:b2: d4:bb:e9:5a:4c:cc:68:af:e7:22:47:27:53:43:cb: e8:73:c6:ed:66:09:a3:86:84:3b:91:6d:93:2a:82: 70:34:a5:c8:1c:00:b2:4b:02:d3:b1:d6:3f:e3:fe: d8:9e:53:c6:1a:bc:ad:4e:67:f5:8b:c4:95:68:ae: 3a:41:b1:73:05:ba:5d:c1:92:6c:37:fc:f7:07:cc: 4f:31:b9:e9:b0:a4:b6:15:0b:79:d4:2c:6f:be:6b: 9b:e1:fb:db:d7:58:2b:25:1e:fe:a4:09:43:97:01: e1:68:00:b0:1d:d1:03:44:53:98:e9:3b:c4:38:6f: a9:53:3c:c8:09:ba:7a:ab:65:65:4b:90:bf:b9:35: ec:9c:32:d6:04:b0:a7:ab:53:a1:94:e1:1f:95:18: f2:20:f0:6c:27:6b:b0:5b:a4:98:59:9d:d0:41:5b: 87:3f:96:f0:cf:f3:de:75:b3:2b:5e:02:59:13:99: d3:ab:6b:b7:7d:b5:67:cc:b4:b2:df:26:a7:d6:a0: 70:51:d9:63:36:4b:22:11:c9:c7:c4:b8:c3:a6:0a: 87:14:69:06:c8:4b:1c:c4:c6:6e:3e:2e:72:96:24: b6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A6:72:81:EA:2F:6B:AA:CA:CF:44:FB:BF:8F:BE:FE:32:23:7B:DF X509v3 Authority Key Identifier: keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3d:f7:0d:57:d6:3e:69:ca:44:dd:50:d9:8f:09:d4:8d:17: 3b:5d:ea:fc:6e:db:4b:2a:07:c2:e0:f8:91:a9:a8:da:93:dd: ac:96:6a:f8:e1:d5:45:9e:12:e0:d7:95:a1:fa:db:9a:c6:48: b6:85:85:72:be:08:fd:42:01:a5:42:2a:e8:a5:ae:5a:e9:e0: 5e:3d:7b:aa:15:d2:ae:29:d2:4b:76:bc:91:71:47:ce:e8:05: 75:2f:5b:72:fa:76:96:e7:8b:22:31:89:79:76:9e:d1:71:50: c6:9c:cd:82:c0:0f:ea:40:63:78:35:df:69:29:d8:94:52:af: cd:b7:9d:3d:16:3c:ad:58:10:23:62:8c:58:f9:fd:97:20:f8: 20:60:d7:37:8e:88:b6:57:03:8b:02:20:c8:af:61:2a:85:dd: b1:b1:1f:f1:af:1f:19:65:9c:25:92:87:ed:46:7a:df:7e:b2: 5f:f7:9f:1f:4b:06:46:9a:f8:fc:29:16:9d:c4:fa:87:3d:78: 49:a8:8c:52:d4:db:6e:fa:5d:f0:78:01:1a:01:52:df:5f:a8: 91:4f:75:5e:8d:32:38:5e:a7:37:50:28:85:29:9a:26:29:fc: 02:8a:9e:fd:75:3d:da:f6:4d:09:64:ab:c7:af:7d:1c:c4:e9: ea:ea:9b:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2syyVf5YwabMgqQ4hsTBlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzM4YTA2YTM5YjIwYjhkYTQwMDA5MjM3ZDc2YWNkZDI4 ZTcxYTUwHhcNMjUxMjE5MTMwMTEwWhcNMjUxMjIwMTMwMTEwWjAzMTEwLwYDVQQD Eyg3MGE2NzI4MWVhMmY2YmFhY2FjZjQ0ZmJiZjhmYmVmZTMyMjM3YmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqsNg9G+JfnRacWWAFb4iKMJVm6b FfOs25Um7LLUu+laTMxor+ciRydTQ8voc8btZgmjhoQ7kW2TKoJwNKXIHACySwLT sdY/4/7YnlPGGrytTmf1i8SVaK46QbFzBbpdwZJsN/z3B8xPMbnpsKS2FQt51Cxv vmub4fvb11grJR7+pAlDlwHhaACwHdEDRFOY6TvEOG+pUzzICbp6q2VlS5C/uTXs nDLWBLCnq1OhlOEflRjyIPBsJ2uwW6SYWZ3QQVuHP5bwz/PedbMrXgJZE5nTq2u3 fbVnzLSy3yan1qBwUdljNksiEcnHxLjDpgqHFGkGyEscxMZuPi5yliS29wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCmcoHqL2uqys9E+7+Pvv4yI3vfMB8GA1UdIwQY MBaAFAHDigajmyC42kAAkjfXas3SjnGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAt YjI5ZjEwY2MwMzI4LzEvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAtYjI5ZjEwY2MwMzI4 LzEvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGT33DVfW PmnKRN1Q2Y8J1I0XO13q/G7bSyoHwuD4kamo2pPdrJZq+OHVRZ4S4NeVofrbmsZI toWFcr4I/UIBpUIq6KWuWungXj17qhXSrinSS3a8kXFHzugFdS9bcvp2lueLIjGJ eXae0XFQxpzNgsAP6kBjeDXfaSnYlFKvzbedPRY8rVgQI2KMWPn9lyD4IGDXN46I tlcDiwIgyK9hKoXdsbEf8a8fGWWcJZKH7UZ6336yX/efH0sGRpr4/CkWncT6hz14 SaiMUtTbbvpd8HgBGgFS31+okU91Xo0yOF6nN1AohSmaJin8Aoqe/XU92vZNCWSr x699HMTp6uqbrQ== -----END CERTIFICATE-----Generated at Fri Dec 19 19:01:23 2025 by rpki-client